diff --git a/lib/tls.js b/lib/tls.js
index a758c8e01c0..fe94a5121f3 100644
--- a/lib/tls.js
+++ b/lib/tls.js
@@ -447,10 +447,9 @@ CryptoStream.prototype._read = function read(size) {
   var bytesRead = 0,
       start = this._buffer.offset;
   do {
-    var read = this._buffer.use(this.pair.ssl, out, size);
+    var read = this._buffer.use(this.pair.ssl, out, size - bytesRead);
     if (read > 0) {
       bytesRead += read;
-      size -= read;
     }
 
     // Handle and report errors